Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa
File:                     3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa (raw, json)
Hash identifier:          RZDb/y++kgDRngPcSfnbcaR4bDgA7bpLajq1Pp07Cyw=
Subject key identifier:   3C:CA:6B:58:D2:58:10:48:59:FC:91:8C:3C:6B:4B:5A:60:D0:40:22
Certificate issuer:       /CN=7537F6016D59B096CB4A693553B4A088507F512A
Certificate serial:       3A626192794F6BEC8943EAE5742F18F31988FFD3
Authority key identifier: 75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa
Signing time:             Tue 05 Mar 2024 18:00:29 +0000
ROA not before:           Tue 05 Mar 2024 17:55:29 +0000
ROA not after:            Tue 04 Mar 2025 18:00:29 +0000
asID:                     262168
IP address blocks:        138.117.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:62:61:92:79:4f:6b:ec:89:43:ea:e5:74:2f:18:f3:19:88:ff:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7537F6016D59B096CB4A693553B4A088507F512A
        Validity
            Not Before: Mar  5 17:55:29 2024 GMT
            Not After : Mar  4 18:00:29 2025 GMT
        Subject: CN=3CCA6B58D258104859FC918C3C6B4B5A60D04022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:1f:4d:3a:b1:f6:69:25:c7:39:fe:90:29:
                    b1:7d:db:88:1f:ba:39:50:9f:18:e5:b5:11:76:71:
                    64:d8:5a:31:2a:60:91:38:6e:0b:5a:78:b5:6a:eb:
                    6f:ff:84:d1:44:ac:8e:3a:10:75:36:89:84:ed:80:
                    6c:27:67:7e:2f:cd:1e:98:7e:17:c8:ca:23:43:92:
                    0d:81:85:59:66:50:39:a2:75:ee:99:88:08:1a:3a:
                    ad:48:3c:ca:01:7d:9a:83:a6:66:0b:33:99:d8:6d:
                    f4:51:8e:34:67:c9:8f:29:bf:cb:d6:2a:dc:58:f2:
                    96:46:bb:69:00:f8:3e:a2:bd:e7:73:4b:8c:06:58:
                    cd:3c:bb:a7:bf:75:ec:f1:40:0a:45:95:62:9f:4b:
                    4d:94:55:88:b8:e4:da:f2:45:fc:9e:78:3d:94:f1:
                    10:f0:df:01:05:e8:c8:e4:8a:c5:0f:13:85:2d:44:
                    1e:83:8c:99:08:4c:24:06:dd:b3:70:1f:73:4a:0e:
                    3f:ea:9e:23:c0:03:ea:5a:bf:22:68:23:4d:22:c2:
                    5d:7d:68:fb:8c:19:5e:a1:a2:10:12:a4:b2:0f:4b:
                    fe:4a:c6:cb:48:9f:e4:c4:ed:4b:a4:19:fb:5a:3d:
                    35:99:bf:3c:9c:65:48:a1:34:0a:1f:1d:84:6e:b7:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:6B:58:D2:58:10:48:59:FC:91:8C:3C:6B:4B:5A:60:D0:40:22
            X509v3 Authority Key Identifier:
                keyid:75:37:F6:01:6D:59:B0:96:CB:4A:69:35:53:B4:A0:88:50:7F:51:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/7537F6016D59B096CB4A693553B4A088507F512A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7537F6016D59B096CB4A693553B4A088507F512A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B55337B7411E36A1FA55AD232EB9631315D557394D9ADB642A6C835B65EDDDA9/0/3133382e3131372e3136302e302f32322d3232203d3e20323632313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:01:4b:c9:5d:fa:79:e8:56:70:28:33:45:fe:56:1a:0a:
         4a:ec:b3:ee:f9:ed:cf:b4:6e:4b:a3:16:d0:7f:18:43:4b:e1:
         5b:55:b5:83:ea:e4:89:7a:11:9e:a3:20:39:b0:39:bb:29:5f:
         c8:ad:d1:d4:fd:78:fa:bd:2b:85:30:b6:cd:41:a4:99:71:49:
         84:fd:be:13:c6:cf:10:9d:ce:2f:a5:63:c0:67:67:15:cd:3a:
         a1:34:a2:c5:7a:b3:7c:87:36:bb:22:da:90:53:0d:b2:cd:9d:
         37:cb:e6:e0:eb:d5:5c:d9:3d:c5:70:c8:eb:cd:67:5d:f2:d2:
         c2:bb:4b:25:fa:9f:e3:ee:50:df:bd:c0:eb:44:3c:0e:7d:36:
         1c:f4:a9:eb:c5:a9:77:e5:3c:86:dc:66:42:ef:a9:e7:be:f1:
         2a:44:20:bd:4b:ed:37:88:92:c5:dd:50:f4:63:60:68:bb:11:
         7b:9b:d9:1d:0e:34:26:9c:53:72:04:81:65:df:4b:37:09:44:
         bc:5e:00:30:dd:78:0b:a6:6a:bb:75:10:f7:df:03:b6:0e:52:
         5f:79:01:56:f1:36:1c:37:c9:6d:05:38:35:cd:f0:96:f2:4a:
         16:36:4b:b4:c1:97:0f:0f:13:b5:20:24:43:9c:b4:ca:45:1a:
         e0:63:33:0f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUOmJhknlPa+yJQ+rldC8Y8xmI/9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzUzN0Y2MDE2RDU5QjA5NkNCNEE2OTM1NTNCNEEwODg1
MDdGNTEyQTAeFw0yNDAzMDUxNzU1MjlaFw0yNTAzMDQxODAwMjlaMDMxMTAvBgNV
BAMTKDNDQ0E2QjU4RDI1ODEwNDg1OUZDOTE4QzNDNkI0QjVBNjBEMDQwMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0R9NOrH2aSXHOf6QKbF924gf
ujlQnxjltRF2cWTYWjEqYJE4bgtaeLVq62//hNFErI46EHU2iYTtgGwnZ34vzR6Y
fhfIyiNDkg2BhVlmUDmide6ZiAgaOq1IPMoBfZqDpmYLM5nYbfRRjjRnyY8pv8vW
KtxY8pZGu2kA+D6ivedzS4wGWM08u6e/dezxQApFlWKfS02UVYi45NryRfyeeD2U
8RDw3wEF6MjkisUPE4UtRB6DjJkITCQG3bNwH3NKDj/qniPAA+pavyJoI00iwl19
aPuMGV6hohASpLIPS/5KxstIn+TE7UukGftaPTWZvzycZUihNAofHYRut6nhAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUPMprWNJYEEhZ/JGMPGtLWmDQQCIwHwYDVR0j
BBgwFoAUdTf2AW1ZsJbLSmk1U7SgiFB/USowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNTUzMzdCNzQxMUUzNkExRkE1NUFEMjMyRUI5NjMxMzE1
RDU1NzM5NEQ5QURCNjQyQTZDODM1QjY1RUREREE5LzAvNzUzN0Y2MDE2RDU5QjA5
NkNCNEE2OTM1NTNCNEEwODg1MDdGNTEyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NTM3RjYwMTZENTlCMDk2Q0I0
QTY5MzU1M0I0QTA4ODUwN0Y1MTJBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjU1MzM3Qjc0MTFFMzZBMUZBNTVBRDIzMkVCOTYzMTMxNUQ1NTczOTRE
OUFEQjY0MkE2QzgzNUI2NUVERERBOS8wLzMxMzMzODJlMzEzMTM3MmUzMTM2MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzMTM2Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
daAwDQYJKoZIhvcNAQELBQADggEBAJT5AUvJXfp56FZwKDNF/lYaCkrss+757c+0
bkujFtB/GENL4VtVtYPq5Il6EZ6jIDmwObspX8it0dT9ePq9K4Uwts1BpJlxSYT9
vhPGzxCdzi+lY8BnZxXNOqE0osV6s3yHNrsi2pBTDbLNnTfL5uDr1VzZPcVwyOvN
Z13y0sK7SyX6n+PuUN+9wOtEPA59Nhz0qevFqXflPIbcZkLvqee+8SpEIL1L7TeI
ksXdUPRjYGi7EXub2R0ONCacU3IEgWXfSzcJRLxeADDdeAumart1EPffA7YOUl95
AVbxNhw3yW0FODXN8JbyShY2S7TBlw8PE7UgJEOctMpFGuBjMw8=
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:04 2024 by rpki-client on console-fra.rpki-client.org